systems nominal programmer · security · iot

Software, security experiments & connected systems.

I'm Zharif. I build web apps, break things in a lab on purpose, and wire sensors to the internet to see what happens. This site is the field log.

focus
python / web / linux
lab
robotics · esp32 · home-net
now
building in public
zharif@lab: ~ live
$ whoami
zharif — builder, breaker, fixer
$

interactive — type , ,

01 — about

Curious by default, technical by habit.

I learn by building. A web app to understand backends, a home lab to understand networks, an ESP32 rig to understand hardware — and a competition robot to understand pressure. If it has a log file, I'll read it.

I work mostly with Python and JavaScript on the web side, Linux and networking on the security side, and ESP32 + sensors on the IoT side. Off-screen, I compete in national robotics on the LEGO platform (Sasbadi) — three seasons in, with two silver medals this year. Nothing here is theoretical — every section of this site maps to something I've actually wired, scripted, built, or broken and fixed.

  • currentlyShipping WebGroceries — grocery e-commerce in PHP + MySQL — alongside Python security tooling and the next robotics season.
  • approachSmall prototypes first. Ship, measure, harden, repeat — on the bench and on the match table.
  • open toCollaborations, CTF teammates, and hardware-software crossover projects.
2×
Silver medalsNational robotics competition · this year · LEGO platform (Sasbadi)
3yr
Competing nationallyThree seasons of build, program, iterate

02 — skills

A working toolkit, not a buzzword wall.

Grouped by where I actually use them. Each tag links to a project that proves it.

No percentage bars here — proficiency is demonstrated by shipped work, linked per skill.

03 — projects

Selected builds & experiments.

Six pieces of work that show how I think: the problem, the implementation, and what broke along the way. Open any card for the full breakdown.

04 — journey

Learning in public, in order.

Not employment history — a technical progression, from the first Python script in 2023 to national podiums in 2026.

    05 — wins

    Proof, not promises.

    Match-day photos, medals and robots. To publish: drop image files into assets/wins/ — anything listed in js/config.js appears here automatically.

    06 — open source

    On GitHub.

    connecting to api.github.com…

    07 — now

    Currently on the bench.

    active build

    Sensor-net dashboard

    ESP32 sensor mesh → Flask API → live dashboard. Working on reliable reconnects and sane data retention.

    esp32flaskmysql

    learning

    Linux hardening + network traffic analysis

    latest experiment

    OSINT recon pipeline on test targets I own

    updated weekly · local time --:--

    08 — contact

    Say hello. Or send a packet.

    The form below validates locally and opens your mail client — no backend wired up yet, so nothing is sent silently. Prefer direct mail? Use the address.

    email hello@example.com github github.com/username
    response usually within 48h

    // anti-spam: address is plain text, no trackers, no newsletter. Form input never leaves your browser except via your own mail client.